For output messages, if the client is a device that has testable state, e.g., an ATM for cash dispensing in which a mechanical counter records when money is dispensed, then duplicate output can be suppressed and output messages are guaranteed to be delivered exactly once.